$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft File: v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json) Hash identifier: v1Ad+QxrIzlKfbDDduBg9Xd8y/94h/SvA1ap4V4aJBQ= Subject key identifier: AB:BB:B4:5D:85:1E:A0:49:F3:24:B3:A4:9B:16:B9:94:63:46:94:5B Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 06F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft Manifest number: 06E2 Signing time: Thu 24 Apr 2025 21:50:40 +0000 Manifest this update: Thu 24 Apr 2025 21:50:40 +0000 Manifest next update: Thu 01 May 2025 21:50:40 +0000 Files and hashes: 1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: UOD3H63W0n5PeBBmB1vezJ1Z3plbRxWjk4ddysuYmNc=) 2: 44E601A48AE411EB9FA47119C4F9AE02.roa (hash: 3R6YoDZW1C1Bqy4OLDxnImm+ghDMXTGayV4irvmHJ9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1782 (0x6f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Apr 24 21:50:40 2025 GMT Not After : May 1 21:50:40 2025 GMT Subject: CN=680ab230-bfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:11:66:51:6d:cb:50:2a:aa:b8:4e:00:63: 50:64:47:6b:06:c9:39:b3:4a:40:5c:e0:46:3d:a5: ed:2d:55:6a:7d:e5:ce:40:37:d5:67:f9:f3:03:9c: e0:f8:ed:4a:d6:2a:7f:e8:a9:bc:7c:d4:0d:a5:32: e8:7e:17:78:1d:54:cb:2b:32:61:ba:28:76:a1:0f: 6e:7c:2b:22:10:9e:a7:95:70:ca:b3:1e:b3:bc:f8: 3e:9a:79:e7:61:1b:6c:6f:06:7f:98:c6:3e:ab:25: 58:9e:ab:59:ac:0e:61:b6:d3:61:33:58:b1:49:f2: 29:98:f5:93:81:20:75:29:ce:fe:c5:be:6f:82:df: cc:cb:ff:01:ce:93:ab:f8:f4:36:73:30:a3:2b:f9: 23:77:1e:de:c9:dd:ae:49:e9:ab:b5:b4:03:2c:ae: 4d:13:e4:e4:0b:3c:d3:ae:3a:94:a6:33:11:ff:57: d5:c9:fa:82:06:ac:f4:51:db:8e:f4:2a:20:c1:19: e3:27:9a:d5:15:03:36:a2:02:a9:d6:16:32:75:45: 1b:41:c3:3e:4c:6b:a7:b5:5e:fe:74:24:a8:6d:ba: f7:54:dd:d8:f2:2e:5d:73:65:3b:6f:39:42:fa:78: 99:d9:4e:65:d3:90:fe:e4:6c:2a:b6:67:55:00:94: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:BB:B4:5D:85:1E:A0:49:F3:24:B3:A4:9B:16:B9:94:63:46:94:5B X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:cd:7d:de:e1:db:b7:9f:aa:8f:21:c8:8e:36:3a:cf:7a:b0: ad:83:9b:bc:27:60:24:ee:0d:99:fe:51:b6:ce:09:09:ea:e1: 7e:bb:66:fe:95:a6:29:bb:84:62:7b:48:75:fb:11:eb:4a:7c: 39:d8:be:d3:8a:7d:32:f4:12:8d:4c:6a:7f:ad:ae:7b:13:39: eb:95:3a:76:9e:92:ea:08:b6:a0:46:84:00:a6:e7:16:a2:5f: 6f:e9:b1:d4:9d:e2:d7:f2:a5:9f:f0:c9:18:4f:27:6a:91:4d: aa:b8:26:d8:ca:30:da:db:a5:0a:cd:ce:7e:a3:b5:d6:df:60: bb:b6:b2:25:f2:ff:0c:a4:a2:4e:c6:f2:63:4b:6b:c4:42:a0: 7a:36:3d:f6:3b:6c:b5:f4:a8:66:ed:ec:55:41:ab:5f:f3:e1: cf:b6:25:7e:51:7b:91:8a:c7:7b:a6:59:5d:f2:ce:7e:4f:04: bc:f2:88:72:7e:52:2f:77:57:ef:75:44:c9:61:66:de:c4:6b: 05:21:55:ff:c1:f4:53:50:7f:8e:25:8b:4d:c4:23:16:a2:ce: 70:de:f7:d8:ba:3a:e9:c2:93:3d:df:a9:e1:f6:71:98:ec:6e: 88:42:b6:94:b3:e3:ae:91:d6:b0:77:17:2f:d1:f0:22:af:4d: 10:c1:d1:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjUwNDI0MjE1MDQwWhcNMjUwNTAxMjE1MDQwWjAYMRYwFAYD VQQDEw02ODBhYjIzMC1iZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsscRZlFty1AqqrhOAGNQZEdrBsk5s0pAXOBGPaXtLVVqfeXOQDfVZ/nzA5zg +O1K1ip/6Km8fNQNpTLofhd4HVTLKzJhuih2oQ9ufCsiEJ6nlXDKsx6zvPg+mnnn YRtsbwZ/mMY+qyVYnqtZrA5httNhM1ixSfIpmPWTgSB1Kc7+xb5vgt/My/8BzpOr +PQ2czCjK/kjdx7eyd2uSemrtbQDLK5NE+TkCzzTrjqUpjMR/1fVyfqCBqz0UduO 9CogwRnjJ5rVFQM2ogKp1hYydUUbQcM+TGuntV7+dCSobbr3VN3Y8i5dc2U7bzlC +niZ2U5l05D+5GwqtmdVAJSXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu7tF2F HqBJ8ySzpJsWuZRjRpRbMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDk4RC80NjE0NTdCNDUwMEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5 VDNzbkJWNHJOSFJmNWhBZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDzX3e4du3n6qPIciONjrPerCtg5u8J2Ak7g2Z/lG2zgkJ6uF+u2b+ laYpu4Rie0h1+xHrSnw52L7Tin0y9BKNTGp/ra57EznrlTp2npLqCLagRoQApucW ol9v6bHUneLX8qWf8MkYTydqkU2quCbYyjDa26UKzc5+o7XW32C7trIl8v8MpKJO xvJjS2vEQqB6Nj32O2y19Khm7exVQatf8+HPtiV+UXuRisd7plld8s5+TwS88ohy flIvd1fvdUTJYWbexGsFIVX/wfRTUH+OJYtNxCMWos5w3vfYujrpwpM936nh9nGY 7G6IQraUs+Oukdawdxcv0fAir00QwdGb -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:11 2025 by rpki-client